Report Phishing
Vendor Solutions
Consumer Advice
 - Home
 - Report Phishing
 - APWG Events
 - Resources
 - eCrime & Phishing News
 - Phishing Education
 - Crimeware Map
 - APWG Member Site
 - Contact Us

APWG Global
Research Partners

 click here for a full listing

APWG eCrime Newswire
Powered by Exfacto!


eCrime Researchers Summit Details here

Registration for the 2009 General Members Meeting & eCrime Researchers Summit is $325 for all three days and all after hours gatherings. An "early bird" discounted rate of $250 for registrations on or before 25 September.

Register Here

Conference Planning Partner & Platinum Sponsor



Platinum Level Sponsors



Silver Level Sponsors



Technical Sponsor
Meeting Focus

The APWG is pleased to present the 2009 Fall General Meeting and eCrime Researchers Summit, a combined eCrime Congress | Tacoma that no eCrime researcher or counter-eCrime developer or responder will want to miss. Please join us at this opportunity to bring yourself up-to-date on phishing and eCrime's evolution across the globe. Count on three full days of cutting presentations on eCrime and eCrime response, expert discussions and in-depth round-tables with updates on APWG projects in development for the counter eCrime community. As well, we will look into the future of the APWG's development and for guidance on managing it from our eclectic member base.

eCrime Congress Tacoma will include a one-day, members-only meeting on October 19 and two full days of open sessions thereafter of programming that will be open to members and non-members. APWG will examine crimeware's evolution, behavioral vulnerabilities and human factors that contribute to eCrime's success, the roles of Registrars, Registries and DNS in managing phishing attacks, public health approaches to managing the eCrime scourge, as well as breaking news on counter-eCrime efforts and resources.

APWG Members and Non-Members Please Note: The sessions at the Fall General Meeting on October 19 are open to APWG Members Only. APWG organizers will vet all registrants that sign up for the conference. Interlopers will not be accommodated. The subsequent eCrime Researchers Summit sessions on October 20 and 21 is a public event open to all. If you haven't already, check membership rules and benefits at: Members at the individual level and above are eligible to attend all APWG conferences, including the General Members' meetings.

Program Overview

Presentations at the opening of the program will be delivered by ecrime responders within the APWG, its Global Research Partners and law enforcement personnel who will discuss national and regional ecrime trends and individual case studies about resolving specific electronic crime cases. Presenters will come from the ranks of private industry, private security companies, public law enforcement agencies, government agencies and national Computer Emergency Response Teams (CERT). True crime stories will be balanced with instruction about the skills the responders exercise as well as the data and tools employed to resolve phishing attacks.

APWG principals, research fellows and Global Research Partners will detail survey the eCrime landscape and present proposals for organizing global responses that will harmonize efforts of eCrime respondents and organize the work of securing the global network infrastructure. Furthermore, presenters will examine the development ecrime data exchange specifications and how they can be employed to optimize counter-ecrime applications. Presentations about industrial policy will investigate industrial policies that complicate the work of exploited brand holders and responders - such as the segments of domain name system (DNS) registration process that is abused by phishers as part of their phishing campaigns.

Program Deliverables

Though instruction is always an APWG priority, the other defining goal is to identify common forensic needs - in terms the data, tools and communications protocols that are required to inform and facilitate time-sensitive communications between counter-ecrime stakeholders.

APWG has surveyed a lot of proposals and all have merit but required some harmonization of effort in order to make them maximally useful. APWG hopes that at the end of the program, the ensuing dialog will produce defined projects to organize data, tools and communications protocols that are required by the larger counter-ecrime community.

Working Agenda

(Under Construction and subject to change) 

  Early Bird Cruise: Sunday afternnon, October 18, our Internet Identity will host a special boat tour of the Puget Sound for our Members attending the 2009 GM. Registered attendees should contact to RSVP for this trip before Thursday, October 15th.
  Monday, October 19 (Members Only during daytime programmed content)  
08:00 Registration Desk Opens / Breakfast    
09:00 Conference Introduction & Reconnaissance of the eCrime Frontier


Dave Jevans

09:15 Corporate Account Takeover

Kevin Thomsen

The Desktop and the eCrime Threatscape

Crimeware Keynote: Stewart on Clampi, the Bank Trojan Blitzkrieg Engine

Joe Stewart

On Malvertising

Eric Davis
10:40 Break

Menacing the Electronic Storefront: Business Logic Attacks Against the Online Enterprise

Laura Mather
, PhD, SilverTail Systems, APWG

David Gottlieb
Mike Eynon
Silver Tail Systems

First Strike: Pre-emptive Engagement of
Conficker Command and Control Infrastructure


Rick Wesson
Support Intelligence

The Network Threatscape
12:15 Lunch

Surfing the Avalanche:
A Look Inside the Largest Fast-Flux Phishing Botnet


John LaCour
14:15 Trends and Domain Name Use in 1H2009
Greg Aaron
Rod Rasmussen

14:45 Mobile Text Message Phishing
Alex Bobotek

Phishing and Telephony:
An Old Fraud Medium Becomes New Again
15:15 Break

Mobile Malware: A New Achilles’ Heel?

Markus Jakobsson
Palo Alto Research Center (PARC)
16:15 The APWG eCrime Exchange Network:
Real Time Response and Collaboration to eCrime Events

Dave Jevans

APWG Member Resources
17:30 APWG Steering Committee Meeting
Representitives from Steering Committee organizations and invited guest will gather to discuss the APWG's goals and progress since our last gathering in Barcelona last May.
Please join us at the Tacoma Glass Museum for a meet and greet reception. All APWG members and registered attendees of the APWG eCrime Researchers Conference are invited. Enjoy a live glass blowing demonstration from local Tacoma artist. In addition to the demonstration the Museum galleries will be open during the reception. Details about the Tacoma Glass Museum at
  Tuesday, October 20 (see Researchers Summit details here)  
08:00 Registration Desk Opens / Breakfast    

Welcome and eCrime Introduction

Foy Shiver
09:10 APWG/NCSA Online Consumer Safety Messaging Convention:
Global Unified Safety Messaging for Enhanced Resonance and Retention

Mike Kaiser
Leigh Fulwood

Consumers, Human Factors and eCrime
09:30 The APWG/CMU Landing Page:
Development and Traffic Analysis of a Counter-Phishing Public Education Utility

Greg Ogorek
Laura Mather

09:50 Muling Scams: Offers No One Can Afford to Accept
Tabatha Marshall

10:20 Anti-Social Networking David Perry
Trend Micro
10:50 Break
11:20 P2P File-Sharing Networks:
New Trends in Cyber Crime and a Model for Tracking Malicious Individuals

Keith Tagliaferri
Techniques to Put Names to the eSuspects

Determining Provenance in Phishing Websites using Automated Conceptual Analysis

Robert Layton, Paul Watters
University of Ballarat, Australia

Law Enforcement Keynote: International Case Study

Special Agent Mark Marik
United States Secret Service

Detective David Dunn
Seattle Police Department
Law Enforcement at the eCrime Frontier
12:45 Lunch

Does eCrime Need Its Own 10-Code?
A proposal for a program to develop definitions for eCrimes and identify variants so identifiers can be used to share data internationally

Pat Cain
14:20 APWG Roundtable: Potential issues in Malicious Use and Abuse of the DNS Created or Exacerbated by the New gTLD Expansion
Rod Rasmussen
Internet Identity

Dave Piscitello
Cristine Hoepers
Ben Butler
Greg Aaron
Dr. Barbara Endicott-Popovsky
University of Washington

15:00 Case Study: Private Domain Registrations at The Notorious 3.F.N.
Dave Piscitello
The Domain Name System and eCrime
15:30 Break

Burn Before Reading: A Stealthy Framework for Combating Forensics Examinations

Mina Guirguis, Jason Valdez, Bassam El Lababedi, Joseph Valdez
Texas State University, USA
eCrime Researchers Summit
Peer-Reviewed Research

Improving Phishing Countermeasures: An Analysis of Expert Interviews

Steve Sheng, Ponnurangam Kumaraguru, Alessandro Acquisti, Lorrie Cranor, Jason Hong
Carnegie Mellon University, USA

Discovery, Infiltration, and Denial of Service in a Process Control System Wireless Network

Bradley Reaves, Thomas Morris
Mississippi State University, USA

Identifying Vulnerable Websites by Analysis of Common Strings in Phishing URLs

Brad Wardman, Gary Warner
University of Alabama Birmingham, USA


19:00 Tuesday night we will assemble just down the street from the hotel at The Varsity Grill. Dinner and entertainment provided by local musician Vicci Martinez will start cocktails at 7:00PM and dinner at 8:00PM.
  Wednesday, October 21  
08:30 Registration Desk Opens / Breakfast    

An APWG Proposal: A Collaborative Research Center for Electronic Crime Response Research

Randy Vaughn
Baylor University
Gary Warner
University of Alabama at Birmingham
eCRS 2.0: A Proposal for an NSF CRC for eCrime
09:20 IPC Research and Policy Review
Rod Rasmussen
IPC Co-Chair
Dr. Laura Mather
SilverTail Systems
IPC Co-Chair

The APWG Internet Policy Committee
09:50 Website Vulnerabilities to be Commandeered as Phish Site
Ebrima Ceesay
Booz Allen Hamilton
John LaCour

10:20 The Abusive Domain Name Resolution Suspension Process Program
Peter Cassidy

10:40 Break

Phishing Detection using Classifier Ensembles

Fergus Toolan, Joe Carthy
University College Dublin, Ireland
eCrime Researchers Summit
Peer-Reviewed Research (Continued)

Exposure to Vulnerabilities through Google Hacking: An Exploratory Study of Four Different Countries

Onook Oh, Rajarshi Chakraborty, Raghav Rao, Shambhu Upadhyaya
University at Buffalo, USA

A Novel Anti-Phishing Framework Based On Honeypots

Roland Schmitz,
Stuttgart Media University,
Federal Republic of Germany
Shujun Li,
University of Konstanz,
Federal Republic of Germany

Why Do Users Trust The Wrong Messages? A Behavioural Model of Phishing

Paul Watters
University of Ballarat,
Victoria, Australia
12:40 Lunch

Humboldt: A Distributed Phishing Disruption System

Paul Knickerbocker, Dongting Yu, Jun Li
University of Oregon, USA

Establishing Phishing Provenance Using Orthographic Features

Liping Ma, John Yearwood, Paul Watters
University of Ballarat,
Victoria, Australia
14:25 APWG Roundtable:
Problem Statement: Articulating the Enduring eCrime Challenges and Research Approaches to Engage Them
Randy Vaughn
Baylor University

Laura Mather, PhD
SilverTail Systems, APWG
Gary Warner
University of Alabama at Birmingham
Pat Cain
Joe St. Sauver
University of Oregon
15:15 Closing Announcements and Awards
Foy Shiver
19:30 Night Out with the APWG: Attendees staying over in Tacoma Wednesday night are invited to join the APWG for our traditional end of conference night out. This get together will be held at a secret location to be announced during the closing session.
Location, Transport and Accommodation Logistics

The Shark Shuttle:
The APWG would like to extend a special thanks to our Planning Partner and Platinum Sponsor Internet Identity for providing the "Shark Shuttle" service between the Seattle Tacoma Airport and the Murano Hotel. The Shuttles are a service provided by Shuttle Express to transport registered attendees to the Murano hotel and for the return trip to the airport.

NOTE: You must register to take advantage of this service. A web site to register your arrival and departure for this service is setup. Details will be sent to all registered attendees.

Event Hotel:
The 2009 Counter-eCrime Operations Summit and all event meetings are being held at the Hotel Murano in downtown Tacoma, easy walking distance to the Museum, Convention Center, University Of Washington at Tacoma campus, restaurants and bars. This is a really nice recently renovated property with attention to detail. During the refurbishment a art theme based on the local glass museum and Tacoma history was used to make this something special. Each floor highlights a particular artist and the lobby is a little museum in itself.

Hotel Murano
1320 Broadway Plaza
Tacoma, WA 98402
(253) 238-8000
(888) 862-3255
(253) 591-4105 (fax)


Hotel Murano

We have negotiated a special discount rate for our attendees. The King Delux or Double Delux Room rate is $139.00 for singleor double occupancy. Please note that a special discounted rate is also available for government employees. These rates are secured through September 27th and are subject to availability after that. Please make your reservations before that date to take advatnatage of this offer.

To make your reservations follow the link below and select "attendee". If you are a govenrment employee, do not select "attendee" but instead enter the access code "APWGGOV" to receive the additional government discount rate.

Hotel Murano Event Reservations Page



Tacoma, Washington, where ART + Nature Meet!

Discover Tacoma and the southern Puget Sound area's amazing combination of cultural attractions, historic sites, outdoor activities and stunning natural beauty.

Things To Do

Maps of Pierce County, Washington

Visitor Information Center

Call for Presentations
APWG members, research partner and correspondents are invited and encouraged to submit their proposals for presentations and panel discussions to the APWG Program Committee at
Vendor Sponsorship Opportunities

APWG is offering an opportunity to build relationships while marketing your company to a targeted audience of security, messaging and financial professionals. Sponsorships are a personal, non-intrusive way of conveying your message. Additionally, your participation can help support activities vital to the overall success of the APWG and its research partners, which ultimately contributes to the success of the entire counter-phishing stakeholders' community.

The following benefits are available to Meeting Sponsors, once your sponsorship is confirmed:

- Recognition in on-site signage displayed during the meal or break
- Distribution of one giveaway such as a literature pack or chotchkee

There are a number of meal, break and entertainment sponsorship opportunities available for APWG members who want to use this meetings as an opportunity to communicate their brand and message to members of the APWG and presenters, each either a critical decision maker or a thought leader in his or her own right.

Please contact Deputy-Secretary Foy Shiver for details via email at

Press Announcements

Below are press replacements related to this event.

  • Press Release  Japanese Press Release